Privacy Policy
This Privacy Policy explains how R&P Grupp OÜ (“we”, “us”, “our”) collects, uses, stores and protects personal data when you use the website starline-sales.eu.
1. Data Controller
R&P Grupp OÜ
Registry code: 10542883
Address: Kadaka tee 1, Tallinn, Estonia
VAT: EE100531929
Data protection contact: Vitali Vladimirov
Email: privacy@starline-sales.eu
The lead supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).
2. What personal data we collect
We collect personal data only when you voluntarily provide it through our website. The categories are:
| Source | Data fields |
|---|---|
| Account registration | First name, last name, email, telephone, country, company name, company address, VAT code, password (hashed) |
| Orders | Billing and shipping address, order comments |
| Support tickets | Device name, serial number, message text |
| Contact / Distributor application form | Name, email, message, company details |
| “Ask about this product” | Name, email, question text |
| Server logs | IP address, browser type, pages visited, timestamps |
We do not collect special-category data (health, biometric, political opinions, etc.). Minors under 16 are not permitted to register.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and managing your dealer/distributor account | Performance of a contract (Art. 6(1)(b)) |
| Processing and fulfilling orders | Performance of a contract (Art. 6(1)(b)) |
| Handling support tickets and enquiries | Performance of a contract / pre-contractual measures (Art. 6(1)(b)) |
| Sending transactional emails (order confirmations, password resets) | Performance of a contract (Art. 6(1)(b)) |
| Keeping accounting and tax records | Legal obligation under Estonian law (Art. 6(1)(c)) |
| Website analytics (Google Analytics, with consent) | Consent (Art. 6(1)(a)) |
| Live chat (OnWebChat, with consent) | Consent (Art. 6(1)(a)) |
| Fraud prevention and site security | Legitimate interest (Art. 6(1)(f)) |
4. Cookies and tracking technologies
Our site uses the following cookies:
Strictly necessary cookies (no consent required):
- OpenCart session cookie — keeps you logged in and maintains your shopping basket.
- Cookie consent preference — stores your Accept/Reject choice.
- Google reCAPTCHA v2 — protects forms against automated abuse.
Analytics cookies (loaded only with your consent):
- Google Analytics (GA4) — helps us understand how visitors use the site. IP addresses are anonymised. Data is processed by Google Ireland Ltd (EU).
Third-party cookies (loaded only with your consent):
- OnWebChat — live chat widget on the front page.
- YouTube (privacy-enhanced mode) — embedded product videos, served from youtube-nocookie.com.
You can change your cookie preference at any time by clearing your browser cookies and revisiting the site; the consent banner will reappear.
5. Data retention
| Data category | Retention period |
|---|---|
| Account data | Until you request deletion, plus a 30-day recovery window |
| Orders and invoices | 7 years (Estonian Accounting Act) |
| Support tickets | Deleted upon closure or up to 24 months |
| Server/access logs | 2 weeks (Zone.ee hosting) |
| Analytics data | 13 months (Google Analytics default) |
| Backups | Rolling 60 days (Zone.ee, Estonia) |
6. Who we share your data with
We share personal data only with the following categories of recipients, all of which are located within the EU/EEA:
- Zone.ee (Estonia) — web hosting, email, database, backups.
- Google Ireland Ltd (Ireland) — Google Analytics and reCAPTCHA.
- OnWebChat — live chat service (loaded only with consent).
We do not share any personal data with ScPA StarLine Ltd (Russia). No customer data flows between starline-sales.eu and StarLine Ltd systems. There are no API connections, shared databases, or file exchanges between the two entities.
We do not sell, rent, or trade your personal data to any third party.
7. International data transfers
All personal data collected on this site is stored and processed within the European Economic Area (Estonia). Our hosting provider Zone.ee operates data centres in Estonia.
Google Analytics may transfer aggregated or pseudonymised data to Google servers outside the EEA; Google operates under EU Standard Contractual Clauses and the EU–US Data Privacy Framework for such transfers.
8. Your rights
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access (Art. 15) — obtain a copy of the personal data we hold about you.
- Right to rectification (Art. 16) — correct inaccurate data.
- Right to erasure (Art. 17) — request deletion of your data, subject to legal retention obligations.
- Right to restriction (Art. 18) — limit how we process your data.
- Right to data portability (Art. 20) — receive your data in a machine-readable format.
- Right to object (Art. 21) — object to processing based on legitimate interests.
- Right to withdraw consent (Art. 7(3)) — withdraw consent at any time (does not affect lawfulness of prior processing).
To exercise any of these rights, email us at privacy@starline-sales.eu. We will respond within 30 days. In complex cases this may be extended by a further 60 days, and we will inform you of any such extension.
9. Data security
We implement appropriate technical and organisational measures to protect your personal data, including:
- TLS/SSL encryption for all data in transit.
- Hashed password storage (bcrypt).
- Hosting within EU-based data centres (Zone.ee, Estonia).
- Encrypted backups with rolling 60-day retention.
- Restricted access to the administration panel.
10. Right to lodge a complaint
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. The lead supervisory authority for R&P Grupp OÜ is:
Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate)
Tatari 39, 10134 Tallinn, Estonia
Phone: +372 627 4135
Email: info@aki.ee
Website: www.aki.ee
You may also lodge a complaint with the supervisory authority of the EU Member State where you reside or work.
11. About StarLine products and the StarLine SaaS service
R&P Grupp OÜ is an independent hardware distributor. We sell StarLine vehicle security hardware (physical devices). We do not operate the StarLine 2 mobile application, the starline.online web portal, or any telematic cloud service.
If you use the StarLine 2 app or starline.online, the data controller for that service is ScPA StarLine Ltd, Saint Petersburg, Russia. Their privacy practices are governed by their own privacy policy, available at starline.online. Please direct any questions about the telematic service to StarLine Ltd directly.
12. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates the most recent revision. Material changes will be communicated through a notice on the website.